$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: otpIoLmGeTnqOQkFfCQVWqZeXmrLi1Ot3uU3Db1pmmE= Subject key identifier: 14:7E:AD:B6:65:5F:DD:E9:A4:3B:EC:20:A1:12:9F:81:C3:ED:BD:4D Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 0130 Signing time: Thu 03 Jul 2025 04:40:54 +0000 Manifest this update: Thu 03 Jul 2025 04:40:53 +0000 Manifest next update: Thu 10 Jul 2025 04:40:53 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: FfJQ8/s7XzZDIjTRrzBARY9K2NhOVlts6nlh5KAT+M8=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: Jul 3 04:40:53 2025 GMT Not After : Jul 10 04:40:53 2025 GMT Subject: CN=686609d5-8877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:20:bd:ad:d0:d2:88:6b:f9:ea:32:7d:68: ab:93:2c:3c:e3:d7:77:24:42:bd:86:3b:1e:45:f4: 25:e0:90:79:62:c3:76:7c:c5:02:f4:05:8f:a8:90: be:56:56:8b:ee:6d:7e:32:5a:44:88:6d:d8:89:b1: 48:fc:9e:c0:1c:a5:50:c8:35:e3:4d:f7:12:25:53: 14:e4:ad:92:04:e1:f2:38:2b:d6:5c:d1:28:68:f9: 2b:ef:c4:12:30:4b:fc:7e:ce:04:94:f7:83:5c:f0: fc:37:a9:79:84:1f:09:53:5b:22:fd:00:9c:46:c0: c8:25:17:06:4a:a6:2e:01:81:3a:87:e1:99:5c:bd: de:50:2d:2b:b7:b0:96:43:30:4d:a3:2c:5a:7f:6f: d6:77:46:54:cb:8e:db:99:8e:71:cd:e4:24:c5:c3: be:61:27:6e:d9:cb:7b:fb:f4:b4:20:ee:61:3d:2c: 91:55:0c:fe:42:ad:51:56:a3:22:a0:61:12:bf:ef: 2f:f2:58:d0:2c:6c:e5:a7:79:a8:98:e2:50:01:f0: 6e:72:ab:fb:aa:ba:83:3b:c1:0f:3b:52:af:e0:31: a0:c8:0e:71:9c:73:68:39:2a:a8:29:3f:12:b1:a5: ff:3f:6a:e2:00:27:06:40:17:62:b4:9f:c8:c6:66: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:AD:B6:65:5F:DD:E9:A4:3B:EC:20:A1:12:9F:81:C3:ED:BD:4D X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:a7:a3:23:12:7c:a4:63:62:31:a8:8c:9e:fd:a8:00:f6: 92:3d:21:41:f0:75:77:c5:4c:4d:d3:78:d6:db:b1:8b:07:17: 12:7d:69:2c:4a:c0:96:ab:f1:16:62:0a:d4:11:09:a6:fc:2a: 2b:0b:8b:53:cb:f8:00:2b:a2:5b:c3:af:d3:30:7c:bc:ab:d7: 20:67:13:73:5d:1c:1c:78:a6:de:a2:44:58:69:6d:3f:b7:2f: b1:78:2f:83:de:9c:19:d0:7b:2e:0a:fa:be:95:84:86:7e:9e: 6a:95:91:25:74:cb:1f:95:f2:61:0f:57:a4:d1:75:44:04:b5: 6c:f8:ad:8a:45:1e:ed:c0:84:e2:de:37:06:49:45:1d:fa:a8: 7d:ce:39:20:c2:61:7e:f3:d4:1c:fb:4c:ee:cc:51:5d:0a:40: e3:9d:0f:e7:be:dd:ba:98:a2:f2:34:ee:5b:be:f3:26:49:e2: c2:5e:0c:6b:5a:1e:0a:f9:92:53:00:db:f6:e3:b1:0e:b4:49: 6c:b3:5d:ee:7e:ba:99:66:1f:b2:0d:4f:92:7e:69:60:d1:93: 74:19:1d:77:ba:55:c3:f5:32:d8:42:e5:c6:00:65:55:9a:8b: 21:35:53:6a:3d:48:75:bd:48:85:2e:f8:fd:3d:33:68:0e:73: 36:c4:2a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3 M0I4QjMxMDMwHhcNMjUwNzAzMDQ0MDUzWhcNMjUwNzEwMDQ0MDUzWjAYMRYwFAYD VQQDEw02ODY2MDlkNS04ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsw4gva3Q0ohr+eoyfWirkyw849d3JEK9hjseRfQl4JB5YsN2fMUC9AWPqJC+ VlaL7m1+MlpEiG3YibFI/J7AHKVQyDXjTfcSJVMU5K2SBOHyOCvWXNEoaPkr78QS MEv8fs4ElPeDXPD8N6l5hB8JU1si/QCcRsDIJRcGSqYuAYE6h+GZXL3eUC0rt7CW QzBNoyxaf2/Wd0ZUy47bmY5xzeQkxcO+YSdu2ct7+/S0IO5hPSyRVQz+Qq1RVqMi oGESv+8v8ljQLGzlp3momOJQAfBucqv7qrqDO8EPO1Kv4DGgyA5xnHNoOSqoKT8S saX/P2riACcGQBditJ/IxmbMkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR+rbZl X93ppDvsIKESn4HD7b1NMB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5 QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4 QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH8aejIxJ8pGNiMaiMnv2oAPaSPSFB8HV3xUxN03jW27GLBxcSfWks SsCWq/EWYgrUEQmm/CorC4tTy/gAK6Jbw6/TMHy8q9cgZxNzXRwceKbeokRYaW0/ ty+xeC+D3pwZ0HsuCvq+lYSGfp5qlZEldMsflfJhD1ek0XVEBLVs+K2KRR7twITi 3jcGSUUd+qh9zjkgwmF+89Qc+0zuzFFdCkDjnQ/nvt26mKLyNO5bvvMmSeLCXgxr Wh4K+ZJTANv247EOtElss13ufrqZZh+yDU+Sfmlg0ZN0GR13ulXD9TLYQuXGAGVV moshNVNqPUh1vUiFLvj9PTNoDnM2xCp9 -----END CERTIFICATE-----Generated at Sat Jul 5 02:43:08 2025 by rpki-client